CVE-2015-0075

HIGH · 7.2 CVSS Gepubliceerd: 11-03-2015 CWE-264

Beschrijving

The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Impersonation Level Check Elevation of Privilege Vulnerability."

Vendors

Microsoft

Affected products

Windows 2003 Server Windows 7 Windows Server 2008 Windows Vista

References

www.securityfocus.com
www.securitytracker.com
docs.microsoft.com